{"id":"https://openalex.org/W4283825910","doi":"https://doi.org/10.24963/ijcai.2022/183","title":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","display_name":"A Unified Framework for Adversarial Attack and Defense in Constrained Feature Space","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4283825910","doi":"https://doi.org/10.24963/ijcai.2022/183"},"language":"en","primary_location":{"id":"doi:10.24963/ijcai.2022/183","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/183","pdf_url":"https://www.ijcai.org/proceedings/2022/0183.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.ijcai.org/proceedings/2022/0183.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040537843","display_name":"Thibault Simonetto","orcid":"https://orcid.org/0000-0001-5336-3751"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Thibault Simonetto","raw_affiliation_strings":["University of Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5051445607","display_name":"Salijona Dyrmishi","orcid":"https://orcid.org/0000-0002-0446-3227"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Salijona Dyrmishi","raw_affiliation_strings":["University of Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034416417","display_name":"Salah Ghamizi","orcid":"https://orcid.org/0000-0002-0738-8250"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Salah Ghamizi","raw_affiliation_strings":["University of Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000695937","display_name":"Maxime Cordy","orcid":"https://orcid.org/0000-0001-8312-1358"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Maxime Cordy","raw_affiliation_strings":["University of Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040574362","display_name":"Yves Le Traon","orcid":"https://orcid.org/0000-0002-1045-4861"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Yves Le Traon","raw_affiliation_strings":["University of Luxembourg"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I186903577"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":15,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1313","last_page":"1319"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9355999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8778935074806213},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.707057535648346},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6474267244338989},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.5411495566368103},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4972250759601593},{"id":"https://openalex.org/keywords/constraint","display_name":"Constraint (computer-aided design)","score":0.48610687255859375},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.40731728076934814},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.36640000343322754},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1738569736480713},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.09194937348365784}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8778935074806213},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.707057535648346},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6474267244338989},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.5411495566368103},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4972250759601593},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.48610687255859375},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40731728076934814},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36640000343322754},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1738569736480713},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.09194937348365784},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.24963/ijcai.2022/183","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/183","pdf_url":"https://www.ijcai.org/proceedings/2022/0183.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:orbilu.uni.lu:10993/53045","is_oa":true,"landing_page_url":"https://orbilu.uni.lu/handle/10993/53045","pdf_url":null,"source":{"id":"https://openalex.org/S4306401815","display_name":"Open Repository and Bibliography (University of Luxembourg)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I186903577","host_organization_name":"University of Luxembourg","host_organization_lineage":["https://openalex.org/I186903577"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence, IJCAI-22, 1313-1319 (2022); INTERNATIONAL JOINT CONFERENCE ON ARTIFICIAL INTELLIGENCE, from 23-07-2022 to 29-07-2022","raw_type":"http://purl.org/coar/resource_type/c_5794"}],"best_oa_location":{"id":"doi:10.24963/ijcai.2022/183","is_oa":true,"landing_page_url":"https://doi.org/10.24963/ijcai.2022/183","pdf_url":"https://www.ijcai.org/proceedings/2022/0183.pdf","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Thirty-First International Joint Conference on Artificial Intelligence","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4283825910.pdf","grobid_xml":"https://content.openalex.org/works/W4283825910.grobid-xml"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W1673923490","https://openalex.org/W2103862045","https://openalex.org/W2293768274","https://openalex.org/W2408141691","https://openalex.org/W2605409611","https://openalex.org/W2782403400","https://openalex.org/W2898268570","https://openalex.org/W2906773799","https://openalex.org/W2912472836","https://openalex.org/W2913848079","https://openalex.org/W2917485473","https://openalex.org/W2962718684","https://openalex.org/W2963389226","https://openalex.org/W2982631433","https://openalex.org/W2983044655","https://openalex.org/W3007070494","https://openalex.org/W3012161115","https://openalex.org/W3015481738","https://openalex.org/W3021855001","https://openalex.org/W3080913164","https://openalex.org/W3091896612","https://openalex.org/W3105400121","https://openalex.org/W3109966548","https://openalex.org/W3135662895","https://openalex.org/W3165880105","https://openalex.org/W3208456187","https://openalex.org/W4287324272","https://openalex.org/W4287615768","https://openalex.org/W4287663661","https://openalex.org/W4288103501"],"related_works":["https://openalex.org/W17155033","https://openalex.org/W3207760230","https://openalex.org/W1496222301","https://openalex.org/W4312814274","https://openalex.org/W1590307681","https://openalex.org/W2536018345","https://openalex.org/W4285370786","https://openalex.org/W2296488620","https://openalex.org/W2502115930","https://openalex.org/W2358353312"],"abstract_inverted_index":{"The":[0],"generation":[1],"of":[2,107],"feasible":[3,42,119],"adversarial":[4,43,124,136,148,160],"examples":[5,44],"is":[6,97,144],"necessary":[7],"for":[8,32,85,156],"properly":[9],"assessing":[10],"models":[11],"that":[12,29,45,69,83,94,140,168],"work":[13],"in":[14,72,99],"constrained":[15,159],"feature":[16],"space.":[17],"However,":[18],"it":[19],"remains":[20],"a":[21,37,66,79,104,117],"challenging":[22],"task":[23],"to":[24,40,76,109,115,123,128,133],"enforce":[25],"constraints":[26,71,132],"into":[27,63],"attacks":[28,113,161],"were":[30],"designed":[31],"computer":[33],"vision.":[34],"We":[35,59,92,138],"propose":[36,127],"unified":[38],"framework":[39,51,62,151],"generate":[41,116],"satisfy":[46],"given":[47],"domain":[48],"constraints.":[49,58],"Our":[50,150],"can":[52,171],"handle":[53],"both":[54],"linear":[55],"and":[56,78,89,162,166],"non-linear":[57],"instantiate":[60],"our":[61,95],"two":[64],"algorithms:":[65],"gradient-based":[67],"attack":[68],"introduces":[70],"the":[73,153],"loss":[74],"function":[75],"maximize,":[77],"multi-objective":[80],"search":[81],"algorithm":[82],"aims":[84],"misclassification,":[86],"perturbation":[87],"minimization,":[88],"constraint":[90],"satisfaction.":[91],"show":[93],"approach":[96],"effective":[98,146],"four":[100],"different":[101],"domains,":[102],"with":[103],"success":[105],"rate":[106],"up":[108],"100%,":[110],"where":[111],"state-of-the-art":[112],"fail":[114],"single":[118],"example.":[120],"In":[121],"addition":[122],"retraining,":[125],"we":[126],"introduce":[129],"engineered":[130],"non-convex":[131],"improve":[134],"model":[135],"robustness.":[137],"demonstrate":[139],"this":[141],"new":[142],"defense":[143],"as":[145,147],"retraining.":[149],"forms":[152],"starting":[154],"point":[155],"research":[157,170],"on":[158],"provides":[163],"relevant":[164],"baselines":[165],"datasets":[167],"future":[169],"exploit.":[172]},"counts_by_year":[{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}